This is a patch release for v2.1 that includes the following fixes for macOS:
- Fixed an issue where the client could freeze over time, causing the VPN connection to stop working.
- Improved VPN connection stability and fixed intermittent disconnections.
- Fixed an issue where the VPN could appear connected but stop working after switching networks.
- Improved automatic VPN reconnection when changing networks.
With v2.1 release of the Defguard Desktop Client, we introduce a brand-new interface, redesigned from scratch. It brings two separate views: a minimalistic “tray” version for day-to-day activities and a full “window” version for advanced tasks.
| 
|
The new client is also designed to work with the latest Defguard 2.1 server capabilities. The version makes the device itself part of the access decision - admins define the security criteria a machine must meet, and non-compliant endpoints simply can't establish a connection - and it ships a rebuilt Desktop Client whose tray mode gets your users onto the VPN in two clicks.
🛡️ Device Posture verification - client and OS version, security updates, AD membership, antivirus, disk encryption,
⌨️ defguard-client - drive the client from a terminal, MFA included,
🔒 Allowed IPs generated from Firewall Rules - least-privilege configs, no network recon,
🐧 service locations on Linux - Always-on VPN from system boot,
🧩 official support for running Defguard Gateway on VyOS as a container.
More details with videos in this blogpost.
👇 Installation packages for the new client are available in the release assets. For macOS users, it is also available in the App Store.
🔐 As always, this release was pentested by ISEC, together with Striga.AI - all major findings were fixed before release. The full report will be published on our pentesting page.
📖 Documentation for the new features:
- Device Posture verification
- CLI client
- Generate Allowed IPs from Firewall Rules
- Service locations
- Running Gateway on VyOS
🚅 If you would like to test Defguard, we offer a quick and easy One-line install script.
⚠️ Device Posture verification and service locations are Enterprise features.
Business features require free registration.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance.
We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues
What's Changed
Other Changes
- Fix mobile approve factor flickering issue by @filipslezaklab in #1143
- Bump version to 2.1.1 by @jakub-tldr in #1144
- Bump VPNExtension version by @jakub-tldr in #1145
- Fix nightly by @jakub-tldr in #1146
- Change unknown to archived on nightly by @jakub-tldr in #1147
- Fix network selector by @jakub-tldr in #1148
- Statically link crt by @t-aleksander in #1149
- Remove vc dependency by @t-aleksander in #1155
- Allow sleeping on Windows and prepare 2.1.2 release by @moubctez in #1174
- Unstuck macOS by @moubctez in #1181
- Fix handling CTRL-C by @moubctez in #1185
Full Changelog: v2.1.0...v2.1.2